Summer 2027 Internship - Information Security Engineer
General Matter6 days ago
Los Angeles, CA, USAIntern
Responsibilities
- Run penetration tests against networks, services, web applications, and APIs and create working proof-of-concept exploits.
- Audit source code and features for vulnerabilities and build static-analysis rules or CI checks to prevent recurring issues.
- Reverse engineer and attack embedded devices and industrial equipment, including firmware, binaries, debug interfaces, PLCs, and industrial protocols.
- Conduct threat modeling and adversarial design reviews with software, controls, and hardware engineers.
- Assess third-party software, devices, and services and coordinate remediation with vendors and suppliers.
- Test cloud and identity infrastructure for IAM misconfigurations, exposed secrets, privilege escalation paths, and CI/CD supply-chain weaknesses.
- Build automated tooling to identify security exposures and present findings and fixes to system owners.
Requirements
- Currently pursuing a bachelor’s, master’s, or PhD in computer science, computer engineering, electrical engineering, cybersecurity, or a related field.
- Security experience in one or more of C, C++, Rust, Go, Python, x86, ARM, cryptography, reverse engineering, embedded systems, or network protocols.
- Understanding of vulnerability classes including SQL injection, XSS, CSRF, SSRF, memory corruption, and authentication or authorization flaws.
- Experience auditing code and features and reading large codebases written by others.
- Clear written communication and strong investigative and analytical problem-solving skills.
- Preferred qualifications include hands-on offensive security experience, CTFs, bug bounties, CVEs, security research, or homelab projects.
- Preferred qualifications include fuzzing with AFL++ or libFuzzer, static analysis with Semgrep or CodeQL, sandboxing, exploit mitigations, and tools such as Burp Suite, Ghidra, IDA, Binary Ninja, Wireshark, or Metasploit.
- Preferred qualifications include hardware hacking, industrial control systems, PLCs, SCADA, OT protocols, Windows/Active Directory, Linux, cloud platforms, containers, or Kubernetes.
- A GitHub, blog, CTF writeup, CVE, or bug bounty profile demonstrating security work is preferred.
Benefits
- On-site in Los Angeles, California, full-time at 40 hours per week for the entire internship.
- Monthly housing stipend for interns.
- Eligible for overtime pay.
- Hourly pay range of $32–$46, depending on current school standing.
Tech Stack
Categories
About General Matter
We are strengthening America’s capacity in nuclear energy, creating a new set of possibilities for our shared present and future, from generating clean energy at scale to forging energy security.